Double Trouble: Businesses Pay More to Recover from a Security Breach if Virtual Infrastructure is Affected